Apparatus and a method for providing an error signal for a control unit

ABSTRACT

An apparatus for providing an error signal for a control unit, the error signal indicating a malfunction of a sensor unit. The apparatus includes an input module configured to receive a sensor signal from the sensor unit, the sensor signal being a periodic signal between an upper level and a lower level of a physical quantity. Further, the apparatus includes a determination module configured to determine the malfunction of the sensor unit and an output module configured to provide the error signal indicating the malfunction for the control unit. The error signal comprises a predetermined level of the physical quantity which differs from the upper level and from the lower level.

TECHNICAL FIELD

The present disclosure relates to an apparatus and a method forproviding an error signal for a control unit and, in particular, to afailure indication to signalize chip internal failures.

BACKGROUND

In the field of wheel speed sensors designed for sophisticated vehiclecontrol systems one important issue relates to a reliable control overinternal functions of wheel speed sensors. In automotive industry wheelspeed sensors are used for ABS (anti-lock braking systems), gearbox andtransmission applications, but also for indirect tire pressuremonitoring systems (relying on deviations in the rotational speedbetween two wheels). The requirements in the automotive industry havebeen increased in recent times and, in particular, the robustness withrespect to electrostatic discharge and electromagnetic compatibility hasbeen increased. This, in turn, implies an increased demand for areliable error management enabling rotational speed sensors to indicateinternal failures or malfunctions reliably and promptly to a controlunit, as for example the electronic control unit (ECU) used inautomotive applications.

SUMMARY

An apparatus according to one embodiment for providing an error signalfor a control unit, the error signal indicating an internal malfunctionof a sensor unit. The apparatus comprises an input module, which isconfigured to receive a sensor signal from the sensor unit, the sensorsignal being a periodic signal. Further, the apparatus comprises adetermination module, which is configured to determine the internalmalfunction of the sensor unit or the apparatus, and an output module,which is configured to provide the error signal indicating the internalmalfunction for the control unit. The error signal comprises apredetermined level of a physical quantity which differs from an upperlevel and from a lower level used for providing periodic information ofthe sensor signal.

According to a further embodiment a further apparatus for providing anerror signal for a control unit, the error signal indicating amalfunction of a sensor unit. The apparatus comprises an input module,which is configured to receive a sensor signal from the sensor unit, thesensor signal being a periodic signal in a physical quantity. Further,the apparatus comprises an output module, which is configured to providethe error signal indicating the malfunction for the control unit. Theerror signal comprises the predetermined level of the physical quantityfor at least a predetermined time period.

According to a further embodiment an apparatus comprises means forreceiving a sensor signal from a sensor unit, the sensor signal being aperiodic signal between an upper level and a lower level of afluctuating signal in a physical quantity. Further, the apparatuscomprises means for determining a malfunction of the sensor unit andmeans for providing an error signal for a control unit, the error signalindicating a malfunction of the sensor unit. The error signal comprisesa predetermined level of the physical quantity for a predetermined timeperiod, or the error signal differs from the upper level and from thelower level.

According to a further embodiment a method comprises receiving a sensorsignal from a sensor unit, the sensor signal being a periodic signalbetween an upper level and a lower level of a physical quantity.Further, the method comprises determining the malfunction of the sensorunit and providing an error signal indicating the malfunction for acontrol unit. The error signal comprises a predetermined level of thephysical quantity which differs from the upper level and from the lowerlevel.

BRIEF DESCRIPTION OF THE FIGURES

Some examples of the apparatuses and/or methods will be described in thefollowing by way of examples only, and with respect to the accompanyingFigures, in which:

FIG. 1a depicts an apparatus for providing an error signal according toan embodiment of the present disclosure;

FIG. 1b depicts a further apparatus for providing a further error signalaccording to a further embodiment of the present disclosure;

FIG. 1c depicts a further apparatus for providing a further error signalaccording to a further embodiment of the present disclosure;

FIG. 2 depicts an apparatus for providing an error signal using an errorindication line;

FIGS. 3a to 3c depict sensor signals with a failure reaction signalindicating a malfunction of a sensor unit according to an embodiment;

FIGS. 4a to 4c depict sensor signals using a pulse width modulationprotocol including an error signal according to a further embodiment ofthe present disclosure;

FIGS. 5a to 5f depict sensor signals including an alive signal withdifferent malfunctions of the sensor unit;

FIGS. 6a to 6c depict sensor signals using an amplitude modulationprotocol with an error signal according to a further embodiment of thepresent disclosure;

FIG. 7 depicts flow diagram of a method for providing an error signalaccording to embodiments of the present disclosure;

FIG. 8 shows a block diagram of a sensor device;

FIG. 9 shows a transmission of a sensor signal and a notificationsignal; and

FIG. 10 shows a flow chart of a method for providing a notificationsignal for a control unit.

DETAILED DESCRIPTION

Various embodiments will now be described in more detail with referenceto the accompanying drawings in which some embodiments are illustrated.In the figures, the thicknesses of lines, and/or regions may beexaggerated for clarity.

Accordingly, while examples are capable of various modifications andalternative forms, the illustrative examples in the figures will hereinbe described in detail. It should be understood, however, that there isno intent to limit examples to the particular forms disclosed, but onthe contrary, examples are to cover all modifications, equivalents, andalternatives falling within the scope of the disclosure. Like numbersrefer to like or similar elements throughout the description of thefigures.

It will be understood that when an element is referred to as being“connected” or “coupled” to another element, it can be directlyconnected or coupled to the other element or intervening elements may bepresent. In contrast, when an element is referred to as being “directlyconnected” or “directly coupled” to another element, there are nointervening elements present. Other words used to describe therelationship between elements should be interpreted in a like fashion(e.g., “between” versus “directly between,” “adjacent” versus “directlyadjacent,” etc.).

The terminology used herein is for the purpose of describingillustrative examples only and is not intended to be limiting. As usedherein, the singular forms “a,” “an” and “the” are intended to includethe plural forms as well, unless the context clearly indicatesotherwise. It will be further understood that the terms “comprises,”“comprising,” “includes” and/or “including,” when used herein, specifythe presence of stated features, integers, steps, operations, elementsand/or components, but do not preclude the presence or addition of oneor more other features, integers, steps, operations, elements,components and/or groups thereof.

Unless otherwise defined, all terms (including technical and scientificterms) used herein have the same meaning as commonly understood by oneof ordinary skill in the art to which examples belong. It will befurther understood that terms, e.g., those defined in commonly useddictionaries, may be interpreted as having a meaning that is consistentwith their meaning in the context of the relevant art and will not beinterpreted in an idealized or overly formal sense unless expressly sodefined herein.

FIG. 1a depicts an apparatus 100 for providing an error signal 105 a fora control unit 30 according to an embodiment. The error signal 105indicates an internal malfunction of a sensor unit 20. The apparatus 100comprises an input module 110 for receiving a sensor signal 115 from thesensor unit 20. The apparatus 100 further comprises a determinationmodule 120, which is configured to determine the internal malfunction ofthe sensor unit 20 or the apparatus 100. The apparatus 100 furthercomprises an output module 130, which is configured to provide the errorsignal 105 indicating the malfunction for the control unit 30. Thesensor signal 115 may be a periodic signal. Further, the error signal105 comprises a predetermined level of a physical quantity (e.g. voltageor current), which differs from an upper level and from a lower level(of the physical quantity) used for providing periodic information ofthe sensor signal.

The senor unit 20 (e.g. magnetic field sensor, giant magnetoresistancebased sensor) may provide an analog periodic sensor signal (e.g.indicating a magnitude of the magnetic field by the amplitude of thesensor signal) to the input module 120 a, for example.

The input module 110 (e.g. analog to digital converter) may process thesensor signal. For example, the input module may convert the analogperiodic signal to a digital signal and/or may detect a zero crossing ofthe sensor signal 115.

The determination module 120 may determine a malfunction of the sensorunit 20 or the apparatus based on the senor signal 115 (e.g. analogperiodic sensor signal) or an output signal of the input unit 110 (e.g.digital periodic sensor signal) or another signal derived from thesensor signal to obtain an output sensor signal (e.g. providing periodicinformation of the sensor signal) to be provided by the output module130.

The determination module 120 may generate the error signal 105 to beprovided by the output module 130 or may trigger the output module 130to generate the error signal 105 (e.g. by interrupting the transmissionof the periodic information of the sensor signal or additionalinformation and providing the error signal).

The output module 130 provides the error signal 105. Further, the outputmodule 130 may provide an output sensor signal indicating periodicinformation of the sensor signal.

The periodic information of the sensor signal may be represented bypulses of the physical quantity (e.g. current) within the output sensorsignal. For example, the current of the output sensor signal rises fromthe lower level to the upper level at the time the senor signalcomprises a predefined magnitude (e.g. a zero crossing) and drops backto the lower level after a predefined pulse time interval.

Here and in the following embodiments the internal malfunction mayrelate to any internal error of the sensor unit 20 and/or the apparatus100. It may for example relate to a failure of the sensor or an error inthe data processing.

FIG. 1b depicts an apparatus 100 a for providing an error signal 105 afor a control unit 30 according to an embodiment. The error signal 105 aindicates a malfunction of a sensor unit 20 a. The apparatus 100 acomprises an input module 110 for receiving a sensor signal 115 a fromthe sensor unit 20. The apparatus 100 a further comprises adetermination module 120 a, which is configured to determine themalfunction of the sensor unit 20 a. The apparatus 100 a furthercomprises an output module 130, which is configured to provide the errorsignal 105 a indicating the malfunction for the control unit 30. Thesensor signal 115 a may be a periodic signal between an upper level (orhigher level or high-level) and a lower level (or low-level) of aphysical quantity and the error signal 105 a comprises a predeterminedlevel of the physical quantity, which differs from the upper level andfrom the lower level.

Here and in the following embodiments the malfunction may relate to anyinternal error of the sensor unit 20 and/or the apparatus 100 a. It mayfor example relate to a failure of the sensor or an error in the dataprocessing or an overheating condition or other malfunctions that may ormay not result in incorrect or at least non-reliable measurements of thesensor unit 20 or the transmission of the corresponding signals. Alsobit errors in an internal sensor memory may be a malfunction signaled tothe control unit 30.

The predetermined level of the physical quantity (e.g. an electriccurrent) may differ from the upper level by at least by a first offset(e.g. by at least 10% or at least 20% of the upper level) and from thelower level by at least a second offset (e.g. by at least 10% or atleast 20% of the lower level). The first offset and the second offsetmay or may not be equal.

FIG. 1b depicts a further apparatus 100 b for providing a further errorsignal 105 b to the control unit 30 according to an embodiment. Thefurther error signal 105 b indicates a malfunction of at least one of asensor unit 20 b and the apparatus. The apparatus 100 b comprises aninput module 110 for receiving a sensor signal 115 b from a sensor unit20 b. The sensor signal 115 b is a periodic signal in a physicalquantity (e.g. an electric current or voltage). The apparatus 100 b mayoptionally comprise a determination module 120 b, which is configured todetermine the malfunction of the further sensor unit 20 b or theapparatus. The apparatus 100 b further comprises an output module 130which is configured to provide the error signal 105 b for the controlunit 30. The error signal 115 b comprises a (first) predetermined levelof the physical quantity for a (first) predetermined time period.

The apparatus 100 b differs from the apparatus 100 a, for example, byproviding (or transmitting) the error signal for a predetermined periodof time. For example, the apparatus may be configured to transmit asequence of alive signals indicating an operational state of the sensorunit. The output module 130 may be configured to transmit the furthererror signal 105 b for a (first) predetermined time period being longerthan two subsequent alive signals of the sequence of alive signals.Therefore, the predetermined period may be longer than the time periodbetween two subsequent alive signals. As a result, the control unit 30may be informed that, although the sensor unit 20 is still alive, itdoes not function appropriately.

Further embodiments relate to limitations applicable to both theapparatus 100 a and the apparatus 100 b so that in the following thedistinction between the apparatus 100 a and the apparatus 100 b is onlymade where the differentiating features are added only to one of theapparatuses 100 a, 100 b. Therefore, all further limitations describedwith respect to the sensor unit 20, the determination unit 130, sensorsignals 115 and error signals 105 are applicable in the same way for thesensor unit 20 b, the determination unit 120 b, sensor signals 115 b anderror signals 105 b. Moreover, examples for the error signal 105 a andthe error signal 105 b are described in conjunction with FIGS. 3 to 6.

The determined malfunction may relate to several different malfunctionsthat may occur in a sensor unit 20. Hence, according to furtherembodiments the malfunction may be included in a plurality ofmalfunctions. The determination module 120 is configured to determinedifferent malfunctions of the plurality of malfunctions and the outputmodule 130 is configured to select different predetermined levels ortimes from a plurality of levels or times based on the differentmalfunctions. The output module 130 may be further configured to selectthe predetermined levels being below the lower level, or between thelower level and the upper level, or above the upper level, if periodicinformation of the sensor signal 115 is a periodic signal fluctuatingbetween the upper level and the lower level of a physical quantity.

The malfunction may either be signaled by a signal received from thesensor unit 20 or be derived by analyzing the sensor signal 115, or acombination thereof.

Therefore, in further embodiments the determination module 120 isconfigured to determine the malfunction by analyzing the sensor signal115 transmitted from the sensor unit 20. This analysis may include acomparison of a received sensor signal 115 with an expected sensorsignal. For example, the received sensor signal may have wrong levels ofthe signal. Furthermore, the upper and lower levels may have not theexpected values (e.g. 7 mA and 14 mA), or the edge steepness may nothave the expected value, or the signal is not periodic with a meaningfulfrequency (dependent on the particular application) related to anexpected normal rotation speed (but not multiple thereof).

For example, the periodic information of the sensor signal and the errorsignal may be provided through the same transmission line (wiredtransmission) or the same transmission channel (wireless transmission).For example, by using different levels of the physical quantity, theerror signal may be identified and/or distinguished from the sensorsignal, although the same transmission line or the same transmissionchannel may be used.

For example, the determination module may determine the malfunction ofat least one of the sensor unit and the apparatus for providing an errorsignal. The malfunction may be an internal malfunction of at least oneof the sensor unit and the apparatus. The internal malfunction of atleast one of the sensor unit and the apparatus may be unknown to thecontrol unit at a time of detection. Optionally, the determinationmodule may trigger a reset, restart or recalibration of at least one ofthe sensor unit and the apparatus based on the detected internalmalfunction. Additionally, the output module may provide a notificationsignal to the control unit, if a reset, restart or recalibration of atleast one of the sensor unit and the apparatus is triggered internally.For example, the notification signal may comprise a second predeterminedlevel of a voltage or a current for at least a second predetermined timeperiod (or the first determined level of a voltage or a current for atleast a second predetermined time period or a second predetermined levelof a voltage or a current for the first predetermined time period) toinform the control unit on the internally triggered reset, restart orrecalibration of at least one of the sensor unit and the apparatus.

For example, the output module may provide a notification signalindicating a reset, restart or recalibration for a time period longerthan the period between two subsequent alive signals, if a reset,restart or recalibration of at least one of the sensor unit and theapparatus is triggered internally. For example, the periodic informationof the sensor signal, the error signal and the notification signal maybe provided through the same transmission line or the same transmissionchannel.

More details and aspects are mentioned in connection with embodimentsdescribed above or below. A proposed apparatus may comprise one or moreoptional additional acts corresponding to one or more aspects mentionedin connection with the proposed concept or one or more embodimentsdescribed above or below.

FIG. 2 depicts a further embodiment of the apparatus 100 that differsfrom the embodiments depicted in FIG. 1a, 1b and/or 1 c in that anoptional error indication line provides an additional channel fortransmitting an indication signal 122 a, b to the determination module120. All other shown components are the same as in FIGS. 1a, 1b and/or 1c. A repetition of the description of those components is omitted here.

In the embodiment shown in FIG. 2, the determination module 120 maydetermine the malfunction based on the received indication signal fromthe sensor unit 20. The determination module 120 may forward the sensorsignal 115 as long as no malfunction is determined. However, when thesensor unit 20 transmits an error indication signal indicating an erroror any kind of malfunction, the determination module 120 may stopforwarding the sensor signal 115 and may cause the output module 130 tooutput the error signal 105.

Therefore, in further embodiments the apparatus 100 may optionallycomprise an error indication line input. The sensor unit 20 isconfigured to indicate the malfunction by transmitting an errorindication signal 122 via an error indication line connectable to theerror indication line input, and the determination module 120 isconfigured to receive the error indication signal 122 from the errorindication line input and to determine the malfunction based on thereceived error indication signal 122.

In further embodiments, the error indication signal may not be forwardedusing a separate line, but may be transmitted over the same line as thesensor signal 115 a, b (e.g. on a different channel).

In yet another embodiment the sensor unit 20 may also be configured todetect the malfunction and if the malfunction is detected, thetransmission of the sensor signal 115 is ceased and instead the errorindication signal 122 a, b is transmitted over the same line or adifferent line.

The output module 130 may further be configured to output the errorsignal 105 only if the determination module 120 has determined themalfunction of the sensor unit 20. If no malfunction has beendetermined, the determination module 120 may forward the sensor signal115 to the output module 130, which transmits the sensor signal 115 tothe control unit 30. Therefore, in further embodiments the determinationmodule 120 is further configured to receive and to forward the sensorsignal 115 to the output module 130 for providing the sensor signal 115for the control unit 30, when no malfunction is determined.

For example, an apparatus for providing an error signal for a controlunit corresponding to one or more embodiments described above or belowand a sensor unit providing the sensor signal and/or the error signal tothe apparatus for providing an error signal for a control unit may beimplemented on the same semiconductor die. The control unit may be anexternal electrical unit (e.g. the electronic control unit (ECU) used inautomotive applications, a microcontroller or a processor) coupled(wired or wirelessly) to the apparatus for providing an error signal fora control unit.

More details and aspects are mentioned in connection with embodimentsdescribed above or below. A proposed apparatus may comprise one or moreoptional additional acts corresponding to one or more aspects mentionedin connection with the proposed concept or one or more embodimentsdescribed above or below.

Further embodiments may also relate to systems as, for example, wheelspeed sensors. Such sensors may be used in ABS (anti-lock brakingsystems) and gearing applications, in particular, if those systemsprovide only an insufficient feedback with respect to internalmalfunctions or failures.

Therefore, further embodiments define a system for detecting a speed ofa wheel. The system may comprise an apparatus 100 a, 100 b, a sensorunit or detector unit and a transmission unit. The senor unit isconfigured to generate the sensor signal indicating information on thespeed of a wheel. Further, the transmission unit is configured totransmit the sensor signal 115 indicating the detected speed of thewheel to the apparatus 100.

The system may optionally comprise a wheel with periodic magnetic polestructures so that a rotation of the wheel is detectable by a periodicmagnetic field. The periodic magnetic poles are arranged along acircumference of the wheel, thereby generating a periodic electricsignal from periodic variation of the magnetic field when the wheelrotates.

For example, the error signal generated by the apparatus 100 a, 100 bmay indicate a system-internal malfunction. A system-internalmalfunction may be an error occurring inside the apparatus 100 a, 100 b,the sensor unit or the transmission unit.

Optionally, the system may further comprise the control unit 30 or thecontrol unit 30 may be an external unit coupled to the system.

Furthermore, in the system the transmission unit may optionally beconfigured to encode information in the sensor signal using a protocol.The protocol may use a pulse width modulation or an amplitudemodulation. The information may be indicating a wheel speed and at leastone of the following: a rotational sense, an air gap information in thedetector, further information indicating an operational state of thesensor. In these systems an integrated, active magnetic field sensor maybe used for the wheel speed application based on Hall technology tomeasure the speed of a pole wheel or a ferromagnetic-toothed wheel. Itmay have a two wire-current interface using a particular protocol forcommunication.

Therefore, embodiments may use rotational speed sensors employing aprotocol for submitting further information. This further informationmay, for example, include wheel speed information, optional rotationdirection information, chip internal status information, or errorindications. The protocol may transmit the rotational speed with asignal (e.g. a current signal) fluctuating between a low-level current(e.g. substantially 7 mA) and a high level current (e.g. substantially14 mA). Also open drain protocols with an additional output pin may beused. Here and in the following the mentioned value may differ within arange of ±10% or ±50%.

The sensor signal 115 may encode the wheel speed information in afrequency of the periodic sensor signal 115 implementing the outputprotocol. The rotational sense may be encoded in a width of the signal(e.g. using pulse width modulation) or in an amplitude of the signal(e.g. using an amplitude modulation protocol). Therefore, it becomespossible to transmit to the control unit 30 (ECU) enhanced sensorinformation, which indicates malfunctions of the rotational speed sensorto ensure a secure operational state. Such failure indication states orsafe states comply with respective requirements. As a result, inaddition to external errors, also internal malfunctions of the sensorcan be noticed externally, which is desirable in automotive standards toprovide a high level of functional security of E/E-systems (electric andelectronic systems).

In some error indication apparatuses, the error signal comprises thesame level as the lower level or the higher level in the protocols totransmit the rotational speed information. However, it may improve thereliability of the error detection and error signaling to output theerror signal with a level, which is different from the lower level andhigher level used. For example, when using a constant current signalwith a level equal to the lower level or the higher level, this may notbe distinguishable from a state of rest of the vehicle wheel (forexample in ABS applications). Moreover, e.g. due to insufficient powersupply or any other error, the system may not be able to supply a signalhaving the lower level or higher level current (as for example 7 mA or14 mA), but an offset will be generated. A standstill of a vehicle wheelmay, according to embodiments, also be indicated by a constant currentlevel, which may correspond to the latest magnetic field. Hence, in caseof an error, it may become not possible to indicate a safe operationalstate to the control unit 30. Therefore, the safe state as demanded bycurrent vehicle requirements may not always be uniquely signalized, ifthe only the low-level and/or high-level are used for error signalizing.

In the following embodiments error signals are described, wherein(electric) current signals are employed for signaling the malfunctionand for transmitting the sensor signal. Therefore, the afore-mentionedphysical quantity (see FIGS. 1a, 1b, 1c and 2) is in the followingembodiments the electric current. However, the present invention is notlimited thereto. In further embodiments other signals may used to encodethe sensor signal or the error signal (e.g. a voltage or a frequency).

More details and aspects are mentioned in connection with embodimentsdescribed above or below. A proposed apparatus may comprise one or moreoptional additional acts corresponding to one or more aspects mentionedin connection with the proposed concept or one or more embodimentsdescribed above or below.

FIGS. 3a to 3b depict an embodiment wherein the error signal 105 maycomprise different levels to indicate internal status information (forexample related to errors). The error signal 115 is thus a failurereaction signal having a constant current I_(FR).

FIG. 3a shows a sensor signal 310 a, b as a sensor current I_(S), whichis interrupted between a first time t1 and a second time t2 by an errorsignal 115, i.e. a first portion 310 a of the sensor signal 310 istransmitted before the first time t1 and a second portion 310 b of thesensor signal 310 is transmitted after the second time t2. During normaloperation the sensor signal 310 a, b in this embodiment is a periodicsignal fluctuating between a high-current level I_(HIGH) and alow-current value I_(LOW). The frequency of this periodic signal 310 a,b may be correlated to the rotational speed of a rotating wheel. If aninternal malfunction or failure occurs in the sensor unit 20 (e.g. atthe first time t1), the apparatus 100 may transmit the error signal 105with a predetermined level I_(FR) (FR=Failure Reaction).

In the present embodiment the predetermined level I_(FR) of the errorsignal 105 is below the lower level I_(LOW). This signal is transmittedto the control unit 30 to indicate that an error has occurred in thesensor or sensor unit. The predetermined level I_(FR) may also have 0 mA(no electric current) dependent on the particular implementation.

At the second time t2 the sensor unit 20 may resume normal operation andthe regular sensor signal 310 b can be transmitted again. Therefore, theerror signal 105 may be transmitted as long as the malfunction ispresent. In further embodiments the error signal 105 may be transmittedrepeatedly to indicate that the sensor unit 20 exhibits a malfunction.The latter case may be used if the malfunction is only minor so that acontinued transmission of the rotational speed may be desirable, forexample.

FIG. 3b depicts an embodiment, wherein the predetermined level I_(FR) isnot below the lower level I_(LOW) but is between the lower level I_(LOW)and the higher level I_(HIGH). Again, the malfunction may occur at thefirst time t1 and lasts, for example, for a time period until the secondtime t2 where the sensor may resume the normal operation. As a result,beginning with the second time t2 the sensor signal 310 b is againtransmitted as a normal periodic signal fluctuating the between the highlevel I_(HIGH) and the low level I_(LOW) with a frequency indicating anexemplary rotation of a wheel.

FIG. 3c is a further embodiment, wherein the predetermined level I_(FR)is above the high level I_(HIGH). Again, all other features are the sameas in the example depicted in FIGS. 3a and 3b and a repetition isomitted here.

The embodiments depicted in FIGS. 3a to 3c allow further the possibilityto indicate at least three different variants of errors by selecting thepredetermined current level I_(FR) accordingly. For example, a firsterror may be indicated with a predetermined current level I_(FR) beingbelow the low level I_(LOW), a second error may be indicated with apredetermined current level I_(FR) being between the low level and thehigh level, and third error may be indicated with a predeterminedcurrent level I_(FR) above the high level. By selecting the differentpredetermined levels I_(FR), the low level and the high level anyerroneous detection can be avoided and the control unit 30 can clearlydetect various errors.

FIGS. 4a to 4c depict further embodiments, which are similar to theembodiments shown in FIGS. 3a to 3c , but differ merely by the sensorsignal 410 a, b again comprising a first part 410 a transmitted beforethe first time t1 and a second part 410 b transmitted after a secondtime t2. Again, during normal operation the sensor 20 transmits aperiodic current signal I_(S) fluctuating between a high level I_(HIGH)and a low level I_(LOW). However, this embodiment employs a pulse widthmodulation protocol. Varying the pulse width of the signal may signalizefurther internal status information. Again, as in the example in theFIGS. 3a to 3c , the frequency may encode a rotational speed of thewheel. In addition, further information (as for example the rotationaldirection) may be indicated by the width of each pulse.

An error or malfunction may again occur between the first t1 to thesecond time t2. As result, the output module 130 may indicate thismalfunction by transmitting an error signal 105 with a constant currentlevel I_(FR), which is different from the high current level I_(HIGH)and the low current level I_(LOW).

FIG. 4a depicts the possibility that the error signal 105 has apredetermined current level I_(FR) below the low level I_(LOW), whereasFIG. 4b depicts the possibility that the predetermined level I_(FR) isbetween the high level I_(HIGH) and the low level I_(LOW). Finally, FIG.4c depicts the example wherein the predetermined level I_(FR) is abovethe high level I_(HIGH). Again, the predetermined level I_(FR) shown inFIG. 4a can also comprise a zero value (e.g. 0 mA) and may, for example,indicate a detached bonding wire or any other failure in the voltagesupply.

Again, the different current levels can be used to signalize differenterrors or malfunctions within the sensor unit 20 so that the controlunit 30 may derive the type of error from the level of the error signal105.

The limitation of using the predetermined level (e.g. the third currentlevel) may be dependent on the variant of the protocol of the sensor.Further embodiments relate also to sensor units 20 transmitting alivesignals to the control unit 30. The alive signal may be transmitted inregular periods to signal the control unit 30 that the sensor unit 20 isstill alive—even in case of a standstill of the wheel. Hence, from anon-rotating wheel, the control unit 30 may not infer that the sensorunit 20 is malfunctioning.

Thus, if a standstill of a wheel is detected the standstill protocol maybe activated, a periodic signal with predetermined period (e.g. 100, 150or 200 ms or any other selected time period) is transmitted. In furtherembodiments the periodic signal is always transmitted as along as thesensor unit 20 is in an operational state (i.e. alive). Therefore, thecontrol unit 30 expects at least this (amplitude-modulated) signal andif the control unit 30 does not receive this alive signal from thesensor 20, the control unit 30 may detect an error. Therefore, accordingto embodiments, the apparatus 100 may signal a malfunction bytransmitting an error signal 105, which is longer than the predeterminedperiod. The predetermined level of the error signal 105 may be equal tothe lower level or the higher level (for example equal to 7 mA or 14mA), but may also be different (e.g. as depicted in the FIGS. 3 to 4).

Therefore, embodiments are not limited to apparatuses, which indicate anerror by transmitting a constant current signal of a particular,distinguishable current level from the upper and lower level, but canalso transmit any constant current independently from the current levelsused for indicating the rotation of the wheel. This current may or maynot be transmitted for a predetermined time period to indicate themalfunctioning.

This way of signaling an error may enable that also a mechanicalfailure, as for example a detached bonding wire, may clearly beidentified. A detached bonding wire may necessarily result in anunpredictable current signal (e.g. of 0 mA). Therefore, according tofurther embodiments, if the control unit 30 detects a constant currentvalue for a predetermined time period (e.g. longer than 100 ms, 150 ms,200 ms or any other particular period) the control unit 30 will identifythis signal as an indication of a malfunction or failure of the sensorunit 20. On the hand, a detached bonding wire is one particular exampleof malfunction. The sensor may not be able to transmit an error current(e.g. of substantially 3.5 mA). Therefore, transmitting no signal (orzero current) may signal this error.

FIGS. 5a to 5d depict the example of a rotational speed sensor using apulse width protocol and an alive signal.

FIG. 5a shows a variation of the magnetic field in such sensors. Anyvariation of the magnetic field may indicate a rotation of the magneticwheel so that the wheel is rotating from time t1 to t2, whereas startingat the second time t2 the wheel slows down and is at standstill at thethird time t3.

The sensor signal 115 of this normal operation is indicated in FIG. 5b .The sensor signal 115 is again a current signal I_(S) transmitted to thecontrol unit 30 being fluctuating between a high level I_(HIGH) and thelow level I_(LOW). Speed pulses 510 are generated at the first time t1and the second speed t2, where the magnetic field B crosses zero. Afterthe second time t2 no further zero crossing occur and thus no furtherspeed pulse are transmitted.

Rotational speed sensors may measure the rotation speed based ondifferential magnetic fields of magnet target wheels, which are attachedto the wheel. They may generate an output signal, which represents themotion of these objects. Additionally, the direction of rotation of arotating target wheel and the quality (strength) of the magnetic signalmay be detected. Hence, the rotation of the wheel may be indicated byperiodic alternating poles which produce a fluctuating magnetic fieldwith periodic zero crossings. Any zero crossing of the magnetic fieldcan be used to transmit a speed pulse 510. If the magnetic field doesnot exhibit a zero crossing, no speed pulse 510 is transmitted. At thesecond time t2 the last speed pulse is generated. This will indicatethat the wheel does not rotate any longer.

In addition, as it is depicted in FIG. 5b , in predetermined timeintervals 530, alive signals 520 will be transmitted indicating that thesensor is still operating, even though the wheel does not rotateanymore. For example, the time intervals 530 may be periodic intervalsof predetermined length. The predetermined length between the end of aspeed pulse 510 and the time of transmitting the alive signal 520 may beany particular time period as for example 150 ms (or 100 ms or 200 ms).

Furthermore, if the speed pulse 510 is not transmitted, for example dueto a standstill of the wheel, the time interval 530 can also be measuredbetween two alive signals 520 (see last three alive signals 520 in FIG.5b ). As a result, if the control unit 30 does not receive a signal forlonger than the time interval 530, the sensor unit 20 may not be alive,i.e. an error has occurred.

In a further embodiment the alive signals 520 may be transmittedirrespectively whether or not a speed pulse 510 is transmitted. In thisembodiment the interval between subsequent pulses may differ, i.e. if aspeed pulse 510 is transmitted, the time interval 530 is shortercompared to the situation if no speed pulse 510 is transmitted.

FIG. 5c indicates the occurrence of a malfunctioning as, for example, indetached bond wire occurring around a first failure time 550. Thedetached bond wire may result in a rapid drop in the current signal (azero current). In this case no alive signal can be transmitted anylonger. Therefore, the expected alive signal at time 540 is missing. Thecontrol unit 30 may infer from the absence of a signal for a waitingperiod 532 that the power supply or a bond wire has been detached andinterpret this as serious error.

FIG. 5d depicts an embodiment with the sensor unit 20 operatingcorrectly until a second failure time 560. Before this time the sensoris in normal operation transmitting a speed pulse 510 at each time themagnetic field is reversed (zero crossing) and alive signals 520 aretransmitted, for example, every 150 ms after the end of each speed pulse510.

At the second failure time 560, an error occurs as, for example, alasting malfunctioning of the current driver. This error may beindicated by a constant high level error current starting at the secondfailure time 560. Again, no alive signal can be transmitted (or will bedetected by the control unit 30), because the current output isconstantly at the high level. The control unit 30 may interpret a highlevel signal for at least a second waiting period 533 (i.e. a lastinghigh level signal instead of pulses) as an error in the sensor.

Both examples depicted in FIGS. 5c and 5d can clearly be distinguishedfrom the correctly operating sensor as depicted in FIG. 5b , whereinmerely a standstill of the wheel has occurred, because the alive signals520 are still correctly transmitted. From the absence of the alivesignals 520 in FIGS. 5c and 5d , the control unit 30 can derive twodifferent kinds of errors: a power supply error and error in the currentdriver.

FIG. 5e depicts an embodiment with the sensor unit 20 operatingcorrectly until the second speed pulse at time t2. Afterwards, no alivesignal is transmitted (or will be detected by the control unit 30),because the current output is constantly at the low level I_(low).Therefore, the expected alive signal at time 540 is missing. The controlunit 30 can detect that no pulse was sent by the sensor at time 540.

FIG. 5f depicts an embodiment with the sensor unit 20 operatingcorrectly until the second speed pulse at time t2. The apparatus detectsan internal error and sends a pulse 511 with different (i.e. longer)pulse length (instead of the normal speed pulse), which informs the ECU(engine control unit) or TCU (transmission control unit) that the sensorstarts a re-initialization (e.g. reset, restart or recalibration).During the re-initialization of the sensor no alive signals are sent andthe ECU or TCU (below called CU) does not check for a missing alivesignal (e.g. at time 540 in FIG. 5d ). After the re-initialization thesensor starts sending speed pulses and alive signals again, for example,until an error occurs and a sensor fault may be detected at time 540 inFIG. 5 f.

For example, the sensor may want to perform an internalreset/recalibration to fix an internal error. If the sensor does this,other CUs would detect it as save state (e.g. since the sensor wouldprovide a constant current level during the reset/recalibration). It maybe proposed that the sensor outputs a predefined pulse length (e.g. asin FIG. 5f ). In this way, the sensor can notify the CU that the sensorperforms an intended reset/recalibration and, therefore, will notprovide pulses for a specific time. For example, the sensor would logoff from the CU and the CU would know that no further pulses areexpected (for the specific time).

FIG. 5f may be an example of a signal course at which the sensornotifies the CU at time t2 that the sensor would like toreset/recalibrate now. The sensor logs out from the CU. After time t4,the sensor pulses stop abruptly. The CU detects that this is not anexpected pulse loss. In this way, the CU can react differently to theevents at time t2 and time t4.

The embodiments described in conjunction with FIGS. 5a to 5f may becombined with the embodiments described in conjunction with FIGS. 3a to4c so that many different malfunctions can correctly be signaled.

FIGS. 6a to 6c depict further embodiments with a periodic sensor signal610 a, b comprising a first part 610 a transmitted before the first timet1 and a second part 610 b transmitted after a second time t2. Duringnormal operation until the first time t1 a periodic signal istransmitted. The sensor signal 610 in this embodiment uses anamplitude-modulated protocol. Therefore, in addition to the frequencyinformation (corresponding to the speed of the wheel), furtherinformation may be transmitted by selecting different amplitude values.

In the example depicted in FIG. 6a , in the first portion 610 a a firstpulse 611 a has an amplitude value extending from a low level I_(L) to ahigh level I_(H). After transmitting this high-level pulse 611 a, lowlevel pulses 612 a are transmitted. The sensor signal 610 periodicallyfluctuates between the low level I_(L) and an intermediate level I_(M).Therefore, the first pule 611 a is higher than the low level pulses 612a. These pulses repeat in the second portion 610 b of the sensor signal610, i.e. again a first high level pulse 611 b is followed by a sequenceof low level pulses 612 b.

In this protocol the frequency or the rotational speed of the wheel maybe indicated by the frequency of the periodic pulses 611 a, 611 b withhigh level I_(H). After each high level pulse (e.g. indicating a zerocrossing of a magnetic field detected by the sensor unit), additionalinformation may be transmitted by the low level pulses 612 a, 612 b. Forexample, a Manchester code may be used for transmitting additional data(e.g. amplitude information, error information, rotation direction).

Again, in this embodiment an error has occurred between the first timet1 and the second time t2 and in response thereto an error signal 105 istransmitted. The error signal may be transmitted after transmission ofthe additional data (as shown in FIG. 6a ) or may start already beforeor during the transmission of the additional data. Thereafter, themalfunction may or may not be overcome, but sensor signal 610 resumesthe normal signaling as described above.

In this embodiment the predetermined level I_(FR) of the error signal105 may be below the low level as shown in FIG. 6a . FIG. 6b depicts afurther example, wherein the predetermined level I_(FR) is between thelow level I_(L) and the intermediate level I_(M) and FIG. 6c depicts anexample, wherein the predetermined level I_(FR) is between theintermediate level I_(M) and the high level I_(H). In furtherembodiments, the predetermined level I_(FR) may even be above the highlevel I_(H).

Therefore, various errors can be indicated by selecting differentpredetermined levels I_(FR) of the constant current error signal.

The error signal 105 may also be part of a safety message indicating anymalfunctioning of the sensor and may be transmitted only over apredetermined time period between the first t1 and the second time t2.It may further be possible to transmit any security relevant informationfrom the sensor 20 to the control unit 30 so that the control unit 30can respond to this malfunctioning. For example, the first time t1and/or second time t2 may also be predetermined so that only theindicated (constant) level may be used to transmit the security-relevantinformation, without exactly identifying the moment when the malfunctionhas occurred.

In summary, different errors or malfunctions may be indicated bydifferent current levels. For example, an “open” or a “short” contactcould be signalized by a current of 0 mA or a maximum specified current.All other errors may be indicated by a respective level of the currentsignal. In further embodiments any physical quantity can be used tosignalize an error, it is not necessary to have current values. However,if the rotation of the wheel is detected by using magnetic induction,the induced current may be used as a sensor signal 115 so that currentsignals can also be used for signaling errors. According to the presentdisclosure it is also possible to transmit internal errors andmalfunctions of the sensor 20, which are not necessarily correlated toexternal errors (for example a drop of the external supply voltage). Bytransmitting a constant current value, the control unit 30 will receiveinformation indicating the occurrence of an error and may react thereto.Embodiments may relate to protocols without transmitting alive signals(see FIGS. 3a to 3c and 4a to 4c ), but also to protocols transmittingalive signals (see whereas FIGS. 5 and 6).

By signaling the internal errors reliably (also the type), a so-calledsafety mechanism may detect the malfunction and react thereto. Forexample, the third constant current signal may comprise a currentstrength, which is different from the periodic current strength, whichis used to signal the rotation of a wheel. For example, the currentsignal may comprise a current level between 1 mA and 6 mA orsubstantially 3.5 mA or 2 mA or 4 mA (or between 8 mA and 13 mA orsubstantially 8 mA or 10.5 mA or 12 mA). Since the third current levelmay be different from the upper and lower level, it becomes possible toclearly detect a malfunction by identifying the third current signal,which is sufficiently different from the upper and lower level. Forexample, if the upper level is 14 mA and the lower level is 7 mA, thethird current level may be ±20% of the 7 or 14 mA.

In further embodiments the sensor signal is a periodic signalfluctuating between an upper level and a lower level. The upper level issubstantially 14 mA and the lower level is substantially 7 mA. Thephysical quantity may be a current signal or a voltage signal or anyother electric signal suitable for transmitting information to thecontrol unit 30.

Further examples relate to a method for providing error signals for acontrol unit 30.

FIG. 7 depicts a flow diagram related to a method according to anembodiment. The method 110 comprises: receiving S112 a sensor signalfrom a sensor unit, the sensor signal being a periodic signal between anupper level and a lower level of a physical quantity; determining S114the malfunction of the sensor unit; and providing S116 an error signalindicating the malfunction for a control unit. The error signalcomprises a predetermined level of the physical quantity which differsfrom the upper level and from the lower level.

More details and aspects are mentioned in connection with embodimentsdescribed above or below. The method may comprise one or more optionaladditional acts corresponding to one or more aspects mentioned inconnection with the proposed concept or one or more embodimentsdescribed above or below.

FIG. 8 shows a block diagram of a sensor device for providing anotification signal for a control unit according to an embodiment. Thesensor device 800 comprises a sensor unit 20 configured to generate asensor signal being a periodic signal of a physical quantity and aninternal control module 820 configured to determine an internalmalfunction of the sensor device. The internal malfunction of the sensordevice is unknown to the control unit 30 at a time of detection.Further, the internal control module 820 is configured to trigger areset, restart or recalibration of the sensor device 800 based on thedetected internal malfunction. Additionally, the internal control module820 is configured to trigger a transmission of a notification signal tothe control unit 30, if a reset, restart or recalibration of the sensordevice 800 is triggered internally. Further, the sensor device 800comprises an output module 830 configured to provide a notificationsignal to the control unit 30, if triggered by the internal controlmodule 820. The notification signal comprises a predetermined level of avoltage or a current for a predetermined time period to inform thecontrol unit 30 on the internally triggered reset, restart orrecalibration of the sensor device 800 during the reset, restart orrecalibration.

By sending a notification of an internally triggered reset, restart orrecalibration of the sensor device to the control unit, the control unitbecomes aware of the reset, restart or recalibration and can avoidtriggering safety measures due to missing signals from the sensordevice. Instead of triggering a reset, restart or recalibration by theexternal control unit, the reset, restart or recalibration can betriggered by the sensor device itself and the control unit is notifiedon the reset, restart or recalibration, for example.

The notification signal may be a signal, which may comprise a predefinedvoltage or current for a predefined time (e.g. longer than a length of aperiodic pulse, for example, a speed pulse, of the sensor signal) sothat the notification signal can be detected by the external controlunit 30. For example, the sensor device 800 outputs the sensor signalcomprising periodic pulses (e.g. speed pulses) according to theoccurrence of specific values (e.g. maximum, minimum or zero crossing)of a quantity measured by the sensor unit (e.g. magnetic field) until aninternal malfunction is detected. The internal control module 820 maytrigger the transmission of the notification signal to inform thecontrol unit 30 on a reset, restart or recalibration of the sensordevice 800. During the reset, restart or recalibration, the sensordevice 800 does not send the sensor signal, for example, but the controlunit 30 is informed and does not expect receiving the sensor signal, forexample. After reset, restart or recalibration, the sensor device 800may start to send the sensor signal again, if the internal malfunctionis fixed.

For example, the internal control module may be configured to trigger atransmission of a sequence of alive signals indicating an operationalstate of the sensor unit (e.g. as described above).

For example, a reset, restart or recalibration of the sensor device maytake longer than a period between two subsequent alive signals of thesequence of alive signals. No alive signals may be transmitted duringthe reset, restart or recalibration of the sensor device.

For example, the internal control module may comprise a determinationmodule as mentioned in connection with FIG. 1a -2.

The internal control module and/or the determination module may be anindividual hardware (e.g. application specific integrated circuit), aprocessor or a microcontroller or part of an individual hardware (e.g.application specific integrated circuit), a processor or amicrocontroller or a software or computer program stored on a machinereadable storage device for running on an individual hardware (e.g.application specific integrated circuit), a processor or amicrocontroller.

For example, the sensor device 800 (e.g. magnetic field sensor device)is connected or connectable to the (external) control unit 30 (e.g. anelectronic control unit ECU or transmission control unit CU), forexample, used in an automotive application.

More details and aspects are mentioned in connection with theembodiments described above or below. The embodiments shown in FIG. 8may comprise one or more optional additional features corresponding toone or more aspects mentioned in connection with the proposed concept orone or more embodiments described above (e.g. FIGS. 1A to 7) or below(e.g. FIG. 9-10).

FIG. 9 shows a transmission of a sensor signal and a notificationsignal. The sensor device outputs the sensor signal comprising periodicpulses 980 (e.g. speed pulses) according to the occurrence of specificvalues (e.g. maximum, minimum or zero crossing) of a quantity measuredby the sensor unit (e.g. magnetic field) until an internal malfunctionis detected. Then, the internal control module triggers the transmissionof the notification signal 990 (e.g. comprising a larger pulse lengththan the periodic pulses of the sensor signal) to inform the CU that asensor calibration is ongoing. For example, a sensor problem occurs, theerror is detected and a recalibration is started at time T1. The CUdisables the watchdog at time T2. During the reset, restart orrecalibration, the sensor device 800 does not send the sensor signal,but the CU is informed and does not expect receiving the sensor signal.The CU enables the watchdog again after a predefined time at time T3.After reset, restart or recalibration, the sensor device starts to sendthe sensor signal again at time T4, which is sufficiently fast afterreactivation of the watchdog by the CU, before the CU would detectmissing sensor pulses.

FIG. 10 shows a flow chart of a method for providing a notificationsignal for a control unit. The method 900 comprises generating 910 asensor signal being a periodic signal of a physical quantity by a sensorunit of a sensor device and determining 920 (detect) an internalmalfunction of the sensor device. The internal malfunction of the sensordevice is unknown to the control unit at a time of detection. The method900 further comprises triggering 930 a reset, restart or recalibrationof at least one of the sensor unit and the apparatus based on thedetected internal malfunction and triggering 940 a transmission of anotification signal to the control unit, if a reset, restart orrecalibration of the sensor device is triggered internally. Further, themethod 900 comprises providing 950 the notification signal to thecontrol unit, if triggered by the internal control module. Thenotification signal comprises a predetermined level of a voltage or acurrent for a predetermined time period to inform the control unit onthe internally triggered reset, restart or recalibration of the sensordevice.

More details and aspects are mentioned in connection with theembodiments described above or below. The embodiments shown in FIG. 10may comprise one or more optional additional features corresponding toone or more aspects mentioned in connection with the proposed concept orone or more embodiments described above (e.g. FIGS. 1A to 9) or below.

Some embodiments relate to a sensor logging off from CU. For example,with functional safety the need to implement sensor self diagnosticfeatures may increase. If then such a self diagnostic feature detects aninternal error, then the sensor might require a sensor restart in orderto do sensor re-calibration etc. However, during sensor reset the sensorwill not be able to deliver output pulses which could then bemisinterpreted by the CU (transmission control unit) as a sensorproblem. The CU could monitor the sensor signal by a software watchdog,with the absence of several pulses the CU could detect an error of thesensor and start some fault tolerant operation mode on system level. Forexample, a temperature watchdog may be implemented. If the sensortemperature variation exceeds a certain level, then due to internaloffset drifts the sensor might end up in deadlock. With a sensorreset/recalibration the sensor can recalibrate offsets and restart in awell working operating condition. However during sensor reset the sensorcannot deliver output pulses which can be wrongly detected by the CU asa sensor deadlock, for example. The CU might enter in a fault tolerantmode.

For example, it is proposed that the sensor triggers a sensorreset/recalibration without external trigger (in order to recalibratecorrectly).

Other approaches may use a System Watchdog. For example, the CU softwarecompares the output pulses of two sensors (one at the input shaft, theother one at the output shaft of the transmission). If one sensor doesnot deliver any pulses meanwhile the other one does, then two scenariosmay occur (e.g. depending on the software revision). For example, the CUsoftware may detect a sensor fault and may enter in the fault tolerantoperation mode (e.g. only gear 1 and 2 are accessible) or the CUsoftware may reset the sensor which did not deliver output pulses. Thispower down reset may cause a complete sensor reset and might not triggera simple recalibration of certain parts of the sensor as proposed.However, this also may require a redundant sensor in the system which isnot always available. Additionally, if the car is in stop mode, then theinput shaft may rotate while the output shaft might not which maytrigger a wrong software reset.

In a proposed example, the sensor may deliver to the ECU the additionalinformation that a sensor reset/recalibration will be performed. Withthis additional information from the sensor the CU can deactivate thesystem watchdog. With this additional information it may be ensured thatthe CU does not wrongly enter into fault tolerant operation mode. Theadditional information of the following sensor reset might betransmitted with a different pulse length, pulse height, etc.

According to an aspect, the protocol communication between sensor and CUis described and may be therefore system relevant. With thismodification the software may be adapted for pulse recognition.Additionally, different implementations of the software watchdog may bepossible (e.g. the software watchdog may be disabled duringrecalibration phase of the sensor).

Improvements of the PWM (pulse width modulation) protocol may beimplemented to meet more or all safety requirements.

Embodiments may further provide a computer program having a program codefor performing one of the above methods, when the computer program isexecuted on a computer or processor. A person of skill in the art wouldreadily recognize that steps of various above-described methods might beperformed by programmed computers. Herein, some examples are alsointended to cover program storage devices, e.g., digital data storagemedia, which are machine or computer readable and encodemachine-executable or computer-executable programs of instructions,wherein the instructions perform some or all of the acts of theabove-described methods. The program storage devices may be, e.g.,digital memories, magnetic storage media such as magnetic disks andmagnetic tapes, hard drives, or optically readable digital data storagemedia. The examples are also intended to cover computers programmed toperform the acts of the above-described methods or (field) programmablelogic arrays ((F)PLAs) or (field) programmable gate arrays ((F)PGAs),programmed to perform the acts of the above-described methods.

For example, some embodiments relate to a unique sensor responsetransmitted to the control unit 30 in case a malfunction or failurewithin the wheel movement sensors. Such malfunctions or failure mayfurther be related to an input signal which is too small (below apredefined threshold), a magnetic offset is too high (above a predefinedthreshold), an internal digital/analog supply voltage is above or belowa predetermined threshold, the temperature is too high or too low (aboveor below a predefined threshold) or an error occurs in an analog/digitalconverter.

The description and drawings merely illustrate the principles of thedisclosure. It will thus be appreciated that those skilled in the artwill be able to devise various arrangements that, although notexplicitly described or shown herein, embody the principles of thedisclosure and are included within its spirit and scope. Furthermore,all examples recited herein are principally intended expressly to beonly for pedagogical purposes to aid the reader in understanding theprinciples of the disclosure and the concepts contributed by theinventor(s) to furthering the art, and are to be construed as beingwithout limitation to such specifically recited examples and conditions.Moreover, all statements herein reciting principles, aspects, andexamples of the disclosure, as well as specific examples thereof, areintended to encompass equivalents thereof.

Functional blocks denoted as “means for . . . ” (performing a certainfunction) shall be understood as functional blocks comprising circuitrythat is configured to perform a certain function, respectively. Hence, a“means for s.th.” may as well be understood as a “means configured to orsuited for s.th.”. A means configured to perform a certain functiondoes, hence, not imply that such means necessarily is performing thefunction (at a given time instant).

It should be appreciated by those skilled in the art that any blockdiagrams herein represent conceptual views of illustrative circuitryembodying the principles of the disclosure. Similarly, it will beappreciated that any flow charts, flow diagrams, state transitiondiagrams, pseudo code, and the like represent various processes whichmay be substantially represented in computer readable medium and soexecuted by a computer or processor, whether or not such computer orprocessor is explicitly shown.

Furthermore, the following claims are hereby incorporated into theDetailed Description, where each claim may stand on its own as aseparate example. While each claim may stand on its own as a separateexample, it is to be noted that—although a dependent claim may refer inthe claims to a specific combination with one or more other claims—otherexamples may also include a combination of the dependent claim with thesubject matter of each other dependent or independent claim. Suchcombinations are proposed herein unless it is stated that a specificcombination is not intended. Furthermore, it is intended to include alsofeatures of a claim to any other independent claim even if this claim isnot directly made dependent to the independent claim.

It is further to be noted that methods disclosed in the specification orin the claims may be implemented by a device having means for performingeach of the respective acts of these methods.

Further, it is to be understood that the disclosure of multiple acts orfunctions disclosed in the specification or claims may not be construedas to be within the specific order. Therefore, the disclosure ofmultiple acts or functions will not limit these to a particular orderunless such acts or functions are not interchangeable for technicalreasons. Furthermore, in some examples a single act may include or maybe broken into multiple sub acts. Such sub acts may be included and partof the disclosure of this single act unless explicitly excluded.

1. An apparatus for providing an error signal for a control unit, theerror signal indicating a malfunction of at least one of the sensor unitand the apparatus, the apparatus comprising: an input module configuredto receive a sensor signal from the sensor unit, the sensor signal beinga periodic signal of a physical quantity, wherein the apparatus isconfigured to transmit a sequence of alive signals indicating anoperational state of the sensor unit; and an output module configured toprovide the error signal indicating a malfunction of at least one of thesensor unit and the apparatus for the control unit, wherein the errorsignal comprises a predetermined level of a voltage or a current for atleast a predetermined time period, wherein the output module isconfigured to transmit the error signal for the predetermined timeperiod being longer than a period between two subsequent alive signalsof the sequence of alive signals.
 2. The apparatus according to claim 1,further comprising a determination module configured to determine themalfunction of at least one of the sensor unit and the apparatus,wherein the malfunction is an internal malfunction of at least one ofthe sensor unit and the apparatus, wherein the internal malfunction ofat least one of the sensor unit and the apparatus is unknown to thecontrol unit at a time of detection.
 3. The apparatus according to claim2, wherein the determination module is configured to trigger a reset,restart or recalibration of at least one of the sensor unit and theapparatus based on the detected internal malfunction.
 4. The apparatusaccording to claim 1, wherein the output module is configured to providea notification signal to the control unit, if a reset, restart orrecalibration of at least one of the sensor unit and the apparatus istriggered internally.
 5. The apparatus according to claim 4, wherein thenotification signal comprises a second predetermined level of a voltageor a current for at least a second predetermined time period to informthe control unit on the internally triggered reset, restart orrecalibration of at least one of the sensor unit and the apparatus. 6.The apparatus according to claim 5, wherein the periodic information ofthe sensor signal, the error signal and the notification signal areprovided through the same transmission line or the same transmissionchannel.
 7. The apparatus according to claim 1, wherein the malfunctionbeing included in a plurality of malfunctions, wherein the determinationmodule is configured to determine different malfunctions of theplurality of malfunctions and the output module is configured to selectdifferent predetermined levels or times from a plurality of levels ortimes based on the different malfunctions.
 8. The apparatus according toclaim 1, wherein the sensor signal is a periodic signal fluctuatingbetween an upper level and a lower level, the output module beingfurther configured to select the predetermined level of a voltage or acurrent of the error signal being below the lower level, or between thelower level and the upper level, or above the upper level.
 9. Theapparatus according to claim 2, wherein the determination module isfurther configured to receive and to forward the sensor signal to theoutput module for providing the sensor signal for the control unit. 10.The apparatus according to claim 2, wherein the determination module isconfigured to determine the malfunction by analyzing the sensor signaltransmitted from the sensor unit. The apparatus according to claim 2,wherein the determination module is configured to receive an errorindication signal from the sensor unit via the input module and isconfigured to determine the malfunction upon receipt of the errorindication signal.
 12. The apparatus according to claim 2, furthercomprising an error indication line input, wherein the sensor unit isconfigured to indicate the malfunction by transmitting an errorindication signal via an error indication line connectable to the errorindication line input, and the determination module is configured toreceive the error indication signal from the error indication line inputand to determine the malfunction based on the received error indicationsignal.
 13. The apparatus according to claim 1, wherein the physicalquantity is a current.
 14. The apparatus according to claim 1, furthercomprising a magnetic field senor unit configured to generate the sensorsignal indicating information on a detected magnetic field.
 15. Theapparatus according to claim 4, wherein the error signal indicates asensor-unit-internal malfunction.
 16. The apparatus according to claim1, wherein the error signal is caused by an input signal, which is belowa predefined threshold, a magnetic offset, which is above a predefinedthreshold, an internal digital/analog supply voltage, which is above orbelow a predetermined threshold, a temperature, which is above or belowa predefined threshold, an error occurring in an analog/digitalconverter, a malfunctioning of a current driver of the sensor unit or adetached bonding wire.
 17. A sensor device for providing a notificationsignal for a control unit comprising: a sensor unit configured togenerate a sensor signal being a periodic signal of a physical quantity;an internal control module configured to determine an internalmalfunction of the sensor device, wherein the internal malfunction ofthe sensor device is unknown to the control unit at a time of detection,wherein the internal control module is configured to trigger a reset,restart or recalibration of the sensor device based on the detectedinternal malfunction, wherein the internal control module is configuredto trigger a transmission of a notification signal to the control unit,if a reset, restart or recalibration of the sensor device is triggeredinternally; and an output module configured to provide the notificationsignal to the control unit, if triggered by the internal control module,wherein the notification signal comprises a predetermined level of avoltage or a current for a predetermined time period to inform thecontrol unit on the internally triggered reset, restart or recalibrationof the sensor device.
 18. The sensor device according to claim 17,wherein the internal control module is configured to trigger atransmission of a sequence of alive signals indicating an operationalstate of the sensor unit.
 19. The sensor device according to claim 18,wherein a reset, restart or recalibration of the sensor device takeslonger than a period between two subsequent alive signals of thesequence of alive signals, wherein no alive signals are transmittedduring the reset, restart or recalibration of the sensor device.
 20. Asystem for detecting a speed of a wheel, the system comprising: anapparatus according to claim 1; a sensor unit for detecting a speed of awheel configured to generate the sensor signal indicating information onthe speed of a wheel; and a transmission unit configured to transmit thesensor signal to the apparatus.